CVE-2022-48602highCWE-78

CVE-2022-48602: high-severity vulnerability in ScienceLogic SL 1

Published · Updated

Follow this CVE+ Monitor SL

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 8.8epss 0.7%
A SQL injection vulnerability exists in the “message viewer print” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes it directly to a SQL query. This allows for the injection of arbitrary SQL before being executed against the database.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected products
ScienceLogic · SL 1
Related CVEs — ScienceLogic SL 1

In the same product, most dangerous first.

CVE-2022-48581HIGHCVE-2022-48581EPSS 1.6%CVE-2022-48584HIGHCVE-2022-48584EPSS 1.6%CVE-2022-48583HIGHCVE-2022-48583EPSS 1.6%CVE-2022-48582HIGHCVE-2022-48582EPSS 1.6%CVE-2022-48580HIGHCVE-2022-48580EPSS 1.5%CVE-2022-48604HIGHCVE-2022-48604EPSS 0.7%